This release updates Kubernetes to v1.28.15.
Important Note
If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.
You may retrieve the token value from any server already joined to the cluster:
cat /var/lib/rancher/rke2/server/tokenChanges since v1.28.14+rke2r1:
- Fixed windows CNI setup in case cni none is configured (#6834)
- Bump Calico v3.28.2 (#6881)
- Add trivy scanning to PR reports (#6835)
- Fix typo in dispatch workflow (#6897)
- Fix uninstall for amazon linux 2 (#6921)
- Bump coredns chart (#6912)
- Update to Cilium v1.16.2 (#6940)
- Update Canal to v3.28.2-build2024100300 and Flannel to v0.25.7 (#6974)
- Bump containerd to v1.7.22 (#7004)
- Ingress-nginx bumps (#6994)
- Bump csi snapshot charts (#7026)
- Update multus to v4.1.2 (#7021)
- Bump k3s (#7035)
- Bump Harvester CSI driver v0.1.20 (#7046)
- Bump Harvester-csi-driver v0.1.20
- Bump K3s/CCM version (#7059)
- Add org.opencontainers.image url and source labels to dockerfiles (#7065)
- Bump CSI snapshot controller chart for CRD updates (#7071)
- Rke2-runtime signing and manifests (#7089) (#7099)
- Update hardened chart images (#7095)
- October K8s patch (#7107)
- Update crictl source image for CVE bump (#7117)
- Bump coredns chart and image (#7113)
- Fix hardened-flannel airgap image for rke2-flannel (#7118)
- Fix release workflow (#7127)
- Use buildkit (#7130)
- Fix publish windows runtime (#7144)
Charts Versions
| Component | Version |
|---|---|
| rke2-cilium | 1.16.201 |
| rke2-canal | v3.28.2-build2024101601 |
| rke2-calico | v3.28.200 |
| rke2-calico-crd | v3.28.200 |
| rke2-coredns | 1.33.002 |
| rke2-ingress-nginx | 4.10.501 |
| rke2-metrics-server | 3.12.004 |
| rancher-vsphere-csi | 3.3.0-rancher100 |
| rancher-vsphere-cpi | 1.8.000 |
| harvester-cloud-provider | 0.2.600 |
| harvester-csi-driver | 0.1.2000 |
| rke2-snapshot-controller | 3.0.601 |
| rke2-snapshot-controller-crd | 3.0.601 |
| rke2-snapshot-validation-webhook | 1.9.001 |
Packaged Component Versions
| Component | Version |
|---|---|
| Kubernetes | v1.28.15 |
| Etcd | v3.5.13-k3s1 |
| Containerd | v1.7.22-k3s1 |
| Runc | v1.1.14 |
| Metrics-server | v0.7.1 |
| CoreDNS | v1.11.3 |
| Ingress-Nginx | v1.10.5-hardened3 |
| Helm-controller | v0.15.15 |
Available CNIs
| Component | Version | FIPS Compliant |
|---|---|---|
| Canal (Default) | Flannel v0.25.7 Calico v3.28.2 | Yes |
| Calico | v3.28.2 | No |
| Cilium | v1.16.2 | No |
| Multus | v4.1.2 | No |
Helpful Links
As always, we welcome and appreciate feedback from our community of users. Please feel free to:
- Open issues here
- Join our Slack channel
- Check out our documentation for guidance on how to get started.